« first day (345 days earlier)      last day (1050 days later) » 

6:10 AM
posted on June 22, 2021

 June 21, 2021 10:53:00 PM PDT We are experiencing a temporary issue with Google Workspace Support in which administrators may encounter slowness (event timeouts) when creating or updating support cases. The Google Workspace Admin Console (Google Admin) is still fully operational.

 
 
6 hours later…
11:55 AM
@PuzzledBoy I noticed :) I am sort of keeping the room from freezing (about 2 weeks - and boom) so I hang out every day (probably need to write a keep-alive bot)
@PuzzledBoy does this Q&A help?
 
12:13 PM
Yeah I've got it open in a background tab pretty much constantly but I don't always remember to check it (or sometimes simply can't find it)
I do have a question though
Scenario is this:
Workspace add-on calls third party api to make a request and includes the current user's OAuth token in hte payload
After X minutes API has data ready and makes a POST request to the Workspace add-on's Web App with the passed token in the header
The third Party API is getting a 403, the HTML page that is returned is the 'Request access' page
I... I'm stumpted, the Web App settings are Run as user and Anyone with Google account so this should be fine, and I've redeployed the Web App and made sure the correct version is the one in the GCP console
 
@RafaGuillermo hm, is it even possible to use Web Apps as a gated API? I never managed to make this setup work...
 
I can't think for the life of me if I've missed something, but it worked when it was published privately for the domain and now no longer does now that it's public
 
@RafaGuillermo yeah, pretty much the same thing :)
 
The 'Request access' page makes me think that it's not able to access the Web App somehow, but making a GET request in the browser returns with no problem
When an account is logged in
 
@RafaGuillermo it does not seem like you are missing anything. I am not sure if public Web Apps that require authentication can be accessed by other APIs like that
I think I recall at least several attempts of mine to do that
 
12:19 PM
Well, it worked in testing...
I don't see why it wouldn't work given that the OAuth token is sent correctly
 
@RafaGuillermo yeah, but it worked for the domain-only, right?
@RafaGuillermo I don't see either - just an observation that I don't recall ever managing to do that :)
 
Hmmm it was only tested on the domain
I tried changing the Script to public on the off-chance but didn't seem to do anything either
That said - it was tested by a Googler in the verification process
So it should in theory be fine
 
@RafaGuillermo huh
@RafaGuillermo you mean like "anyone with the link", right?
 
@OlegValter Yeah so I just figured this out hahaha
The Web App script is now "Anyone with the link can view" and it works outside the domain
I mean, it's far from ideal...
 
@RafaGuillermo yeah, I don't think it's possible to make it work without sharing the project (in this case making it publicly accessible)
methinks I recall this caveat from Tanaike's guide on WebApp authorization
 
12:33 PM
@OlegValter Yeah I think now I recall reading something like that
It's annoying but if it can't be helped...
 
@RafaGuillermo yeah, here it is (damn it, wrong message ping)
 
@OlegValter Thank you!
 
@RafaGuillermo yeah, it's annoying - but as I said, I never managed it to work otherwise. I have an addon (this one not published, though) that does a similar thing: it reroutes form submissions to a web app writes them to a spreadsheet for later processing. I clearly remember the frustration of trying to make it work without explicit public sharing :) I hope you do not have any non-disclosure clauses
but, well, what are the chances that someone guesses the URL of the script?
 
@OlegValter This is what I'm banking on, it's functionally not possible - and even if it were it wouldn't be worth the effort of trying to crack it given what it does
@OlegValter I mean actually the add-on had slightly different functionailty before
But they wanted it to work this way so updated their API to work with it
 
@RafaGuillermo yeah, methinks the chance is too small to actually think about it - and I mean, what would they do even if the URL is guessed, look at the code? It's not like the secrets are hardcoded
 
12:47 PM
@OlegValter Yeah I mean it's just an interface to automate using their API - which is fully documented
 
@RafaGuillermo yeah - and I suppose there aren't many alternatives here - the only thing that comes to mind is to set up a cloud function (or Azure, or Amazon if that's your poison) but that's way too complex a setup for a simple functionality
 
1:30 PM
@OlegValter Not that I'm aware of. I can do cloud functions, much prefer them to Azure/AWS
I've used both but didn't like Amazon so much
Azure's pretty nice though
 
@RafaGuillermo yeah, I like GCF too. Worked with Azure and AWS, though, as well. Lambda is kind of hard to setup - with the API gateway you can't get rid of, otherwise pretty smooth. Azure functions are quite nice, yup
 
1:47 PM
Azure has been the more popular choice amongst my clients I've found, and honestly I completely see why
 
 
1 hour later…
2:59 PM
@RafaGuillermo Microsoft's products were always kinda the enterprise choice, methinks :) Btw, what do you find so nice about Azure? Just curious
 

« first day (345 days earlier)      last day (1050 days later) »